Question

You are the Cybersecurity Analyst for a mid-size retail company. Your company has just acquired a rival company and has discovered that its security practices are deficient and need to be updated to be compliant with your company's standards. The acquisition's primary network uses Microsoft Active Directory with Windows Server 2019 and Windows 10 on the desktops. In addition, the point of sale (POS) system is on its own network and consists of four Linux servers with Oracle 11g databases running on top of them. There is a plan to merge the two networks, but they do not want to proceed until they are sure that all systems have been sufficiently hardened. Management has asked you to supply hardening recommendations only for the following systems: - Windows Server 2019 - Domain Controllers - Web servers (Intranet mainly) - Oracle Linux (POS Servers) - Windows 10 - Users using the POS software - Users not using the POS software The domain controllers and POS servers need extra security, as do the Windows 10 machines running the POS software, so use Level 2 controls for them. Use Level 1 controls for the rest. Using the CIS Controls and Benchmarks, craft a basic hardening guide for all five groups of systems. The benchmark documentation for these systems is extensive, so just pick a few that you feel would be important enough to include in your recommendations.

          You are the Cybersecurity Analyst for a mid-size retail company. Your company has just acquired a rival company and has discovered that its security practices are deficient and need to be updated to be compliant with your company's standards. The acquisition's primary network uses Microsoft Active Directory with Windows Server 2019 and Windows 10 on the desktops. In addition, the point of sale (POS) system is on its own network and consists of four Linux servers with Oracle 11g databases running on top of them. There is a plan to merge the two networks, but they do not want to proceed until they are sure that all systems have been sufficiently hardened. Management has asked you to supply hardening recommendations only for the following systems:

- Windows Server 2019
  - Domain Controllers
  - Web servers (Intranet mainly)
- Oracle Linux (POS Servers)
- Windows 10
  - Users using the POS software
  - Users not using the POS software

The domain controllers and POS servers need extra security, as do the Windows 10 machines running the POS software, so use Level 2 controls for them. Use Level 1 controls for the rest. Using the CIS Controls and Benchmarks, craft a basic hardening guide for all five groups of systems. The benchmark documentation for these systems is extensive, so just pick a few that you feel would be important enough to include in your recommendations.

Added by Daniel M.

Question

Please give Ace some feedback